1412Kkkkid/cve_2021_41773_reproduction Some completed works Create: 2026-07-16 08:12:25 +0000 UTC Push: 2026-07-16 08:12:25 +0000 UTC |

BuSung-dev/CVE-2026-43499-S25U Galaxy S25 Ultra SM-S938N S938NKSUACZF1 port of CVE-2026-43499 Create: 2026-07-16 08:02:46 +0000 UTC Push: 2026-07-16 08:02:51 +0000 UTC |

Sana-404/CVE-2026-8838-Mitigation-and-Detection Create: 2026-07-16 07:01:44 +0000 UTC Push: 2026-07-16 07:01:49 +0000 UTC |

Sana-404/CVE-2026-8388-Mitigation-and-Detection Create: 2026-07-16 06:54:17 +0000 UTC Push: 2026-07-16 06:54:18 +0000 UTC |

HORKimhab/CVE-2022-25477 CVE Realtek SD card reader. CVE-2022-25477, CVE-2022-25478, CVE-2022-25479, CVE-2022-25480, CVE-2024-40432, CVE-2024-40431 Create: 2026-07-16 04:46:13 +0000 UTC Push: 2026-07-16 04:46:17 +0000 UTC |

HORKimhab/CVE-2022-25476 CVE-2022-25476 - Collection Create: 2026-07-16 04:40:48 +0000 UTC Push: 2026-07-16 04:40:51 +0000 UTC |

uname1able/CVE-2025-21333 Create: 2026-07-16 03:54:42 +0000 UTC Push: 2026-07-16 03:54:46 +0000 UTC |

babyshen/CVE-2026-57155 OPNsense Root RCE (CVE-2026-57155) Create: 2026-07-16 02:31:27 +0000 UTC Push: 2026-07-16 02:31:27 +0000 UTC |

minq0x1412/CVE-2026-21955 Create: 2026-07-16 01:34:35 +0000 UTC Push: 2026-07-16 01:34:36 +0000 UTC |

Filipemendonca1978/CVE-2026-21045_and_CVE-2026-21048 Samsung libimagecodec.quram.so OOB Write PoC Create: 2026-07-15 22:22:44 +0000 UTC Push: 2026-07-15 22:22:45 +0000 UTC |

CerberusMrXi/CVE-2026-48909-Joomla-SP-Exploit CVE-2026-48909 - Unauthenticated PHP Object Injection to RCE exploit for Joomla SP LMS extension versions <= 4.1.3. Exploits lmsOrders cookie deserialization to write webshell via Joomla FormattedtextLogger gadget chain. Includes interactive shell, path discovery, and cleanup. For authorized security testing only. Create: 2026-07-15 20:27:48 +0000 UTC Push: 2026-07-15 20:27:49 +0000 UTC |

Kanak-CypherX/cve-2024-4577-lab Create: 2026-07-15 20:23:23 +0000 UTC Push: 2026-07-15 20:23:24 +0000 UTC |

shinthink/CVE-2026-3891 Pix for WooCommerce Unauthenticated File Upload RCE via certificate_crt_path Parameter | CVSS 9.8 Create: 2026-07-15 19:24:19 +0000 UTC Push: 2026-07-15 19:24:23 +0000 UTC |

shinthink/CVE-2026-13001 Podlove Podcast Publisher Unauthenticated File Upload RCE via is_image() vs extract_file_extension() Mismatch | CVSS 9.8 Create: 2026-07-15 19:16:28 +0000 UTC Push: 2026-07-15 19:16:32 +0000 UTC |

oscerd/CVE-2026-46591 Reproducer for CVE-2026-46591: Apache Camel camel-neo4j Cypher injection via property names in CamelNeo4jMatchProperties, enabling authorization bypass / cross-label data exfiltration (fixed in 4.14.8/4.18.3/4.21.0) Create: 2026-07-15 19:13:53 +0000 UTC Push: 2026-07-15 19:13:56 +0000 UTC |

Ch4120N/CVE-2026-58138 Create: 2026-07-15 19:07:52 +0000 UTC Push: 2026-07-15 19:07:53 +0000 UTC |

m4sh-wacker/CVE-2026-3891-Pix-for-WooCommerce-Plugin-Exploit PoC for CVE-2026-3891 — Unauthenticated Arbitrary File Upload leading to Remote Code Execution in Pix for WooCommerce <= 1.5.0 Create: 2026-07-15 19:06:14 +0000 UTC Push: 2026-07-15 19:06:15 +0000 UTC |

shinthink/CVE-2025-32044 CVE-2025-32044 — Moodle 4.5.0-4.5.2 Unauthenticated REST API User Data Exposure via Stack Trace Args Leak | CVSS 7.5 | Mass exploit with token acquisition Create: 2026-07-15 18:54:08 +0000 UTC Push: 2026-07-15 18:54:12 +0000 UTC |

FzRsLLaSheR/CVE-2026-14960-CVE-2026-14961 Create: 2026-07-15 18:19:51 +0000 UTC Push: 2026-07-15 18:19:52 +0000 UTC |

WhatsWrongAndWhy/CVE-2016-9793 Create: 2026-07-15 17:17:47 +0000 UTC Push: 2026-07-15 17:18:24 +0000 UTC |